Enum AuthError 

pub enum AuthError {
    Jose(SharedAuthError),
    ExpMissing,
    Expired,
    ExpUpperBound,
    AudMissing,
    AudMismatch,
    IssMismatch,
    IatMissing,
    IatFuture,
    NotYetValid,
    JtiMissing,
    SubMissing,
    ClientIdMissing,
    TokenTypeMismatch,
    InvalidNumericType,
    SubFormatInvalid,
    AccountTypeInvalid,
    CapsShapeInvalid,
    ScopesShapeInvalid,
    ScopesTooLong,
    DlgDepthInvalid,
    AdminBandRejected,
    UnknownClaim(String),
    JtiReplayed,
    ReplayCacheUnavailable,
    SessionRevoked,
    SessionLookupUnavailable,
    SessionVersionStale,
    SessionVersionLookupUnavailable,
}

Variants

Jose(SharedAuthError)

JOSE-shared wire-format errors (algorithm / header / serialization / parse). The engine submodules check_algorithm / check_header / raw and the structural rejections in engine::verify all surface through this carrier.

ExpMissing

Expired

ExpUpperBound

AudMissing

AudMismatch

M21 + M22 collapsed (string vs array form) — the audit signal is identical: the audience binding does not match this verifier.

IssMismatch

M23: iss is missing OR does not match the pinned issuer. Single variant — the audit signal is “this token did not come from the trusted issuer”.

IatMissing

IatFuture

M24 (future-iat) + M25 collapsed — both enforce iat > now + 60s.

NotYetValid

JtiMissing

SubMissing

ClientIdMissing

M28a: RFC 9068 §2.2 — access JWTs MUST carry client_id.

TokenTypeMismatch

M29: cat (token category) discriminator. RFC 9068 §2.2 + ppoppo extension.

InvalidNumericType

M30: numeric claim is not a JSON integer.

SubFormatInvalid

AccountTypeInvalid

CapsShapeInvalid

ScopesShapeInvalid

ScopesTooLong

DlgDepthInvalid

AdminBandRejected

UnknownClaim(String)

M45: payload contains a claim outside the engine’s strict allowlist. The variant carries the offending claim name for audit.

JtiReplayed

ReplayCacheUnavailable

SessionRevoked

SessionLookupUnavailable

SessionVersionStale

SessionVersionLookupUnavailable

Trait Implementations

impl Clone for AuthError

fn clone(&self) -> AuthError

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for AuthError

fn fmt(&self, __formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Error for AuthError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl From<SharedAuthError> for AuthError

fn from(source: SharedAuthError) -> Self

Converts to this type from the input type.

impl PartialEq for AuthError

fn eq(&self, other: &AuthError) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Eq for AuthError

impl StructuralPartialEq for AuthError